EIP-2026-106661

This advisory details an arbitrary variable overwriting vulnerability in e107's download.php, caused by unsafe use of the extract() function. It explains how this leads to SQL injection and arbitrary PHP code execution, with technical details on exploitation methods and a patch reference.